$ rpki-client -vvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft File: 412965964A4E12BD59BDF602A054F3394E99DC57.mft (raw, json) Hash identifier: sm1W2rVKW7v+G6r3b/qAIjl4AK5f9dHy7cSd8nipOFE= Subject key identifier: 57:77:DE:CF:35:16:85:C9:0A:2F:BA:A3:43:80:F9:CD:A1:D8:83:91 Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57 Certificate serial: 38249EA48A5DD16A94356EF0B3F05835509CD2DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 08:39:24 +0000 Manifest this update: Sat 13 Jun 2026 08:34:24 +0000 Manifest next update: Sun 14 Jun 2026 11:51:24 +0000 Files and hashes: 1: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: TwoAdTsM3NEVv7qQwQrrGzyUs0c/Mt2dxvgYNM1lek8=) 2: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: SenSDJoyF/7+T+Cte5ij0s1hRLf2P72+k6wabdM015Q=) 3: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: PR4TqG8Gt/NDoejWkXR5KiYWrPCc3WE35fh/Jxbvano=) 4: 412965964A4E12BD59BDF602A054F3394E99DC57.crl (hash: unknkfJ7jEAuJnbsqF5oKtCtPZt00s+XxL5VVChrwdk=) 5: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: s2Tpgag7FxdnRddbkWVhsKOC3K9zk4kizsUSEDbaWVQ=) 6: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: uLq3gfPOGWF6ZWj1F9WMmGzvCujMeECGwqgAQGV2Nv4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:24:9e:a4:8a:5d:d1:6a:94:35:6e:f0:b3:f0:58:35:50:9c:d2:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57 Validity Not Before: Jun 13 08:34:24 2026 GMT Not After : Jun 14 11:51:24 2026 GMT Subject: CN=5777DECF351685C90A2FBAA34380F9CDA1D88391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:68:03:45:d7:4f:b0:52:dc:55:93:e6:c3: 8e:7f:d3:5e:e5:0b:81:c1:2b:a1:74:35:e3:36:4f: 34:19:b8:b5:25:bc:5f:61:d4:46:d8:ee:ca:bb:ca: 34:44:6c:05:4f:68:c3:fe:01:45:f3:79:54:bd:b5: 3e:06:6a:0f:a0:67:71:72:b4:6b:a8:9a:05:fe:c7: a3:31:be:da:fe:20:21:3e:ee:53:37:9a:ba:7e:4d: e1:fe:9e:5e:de:db:d2:9f:8f:8b:0c:b7:f4:53:2e: 96:66:e8:8b:0a:69:5c:15:d6:63:1b:cf:58:57:c8: 3b:4e:4f:94:4e:4b:60:c3:25:fb:05:a4:1b:80:25: 11:26:45:e7:97:54:ab:f4:c0:6d:fb:11:83:2c:d4: da:b5:d6:bf:b5:3a:c3:7b:9f:f7:d1:92:07:cc:fd: 1f:10:07:f4:c8:95:27:83:cc:93:3f:7e:8a:a8:be: ce:58:59:06:26:f9:09:93:2b:ff:2c:33:1e:60:36: 26:51:77:8d:f1:47:22:48:3c:c8:b4:60:c5:30:43: dc:4a:96:d6:73:33:f5:0f:dd:26:49:38:18:99:cf: cb:d1:1c:f2:b6:ee:56:14:0a:ae:f3:d6:22:cb:a4: ad:f5:2a:67:8e:c4:91:02:0a:ec:39:31:f4:59:f4: 45:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:77:DE:CF:35:16:85:C9:0A:2F:BA:A3:43:80:F9:CD:A1:D8:83:91 X509v3 Authority Key Identifier: keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:53:75:55:6b:37:ee:c1:8d:b0:e5:9f:1d:89:f9:8a:60:ae: de:88:0c:ef:b8:34:52:47:c0:cf:60:07:6e:a6:aa:38:c1:5e: d3:a9:f5:c8:90:ef:62:35:3a:14:b2:22:15:4f:58:27:a1:55: 61:9e:89:f6:39:f5:30:c6:05:ff:8d:a3:be:73:8b:14:60:73: 38:81:77:74:0a:f4:6b:7b:1a:ca:2f:47:82:a6:37:40:1d:f6: 40:af:07:49:f5:91:3c:5e:97:38:2d:d5:40:28:b8:77:0a:e0: 5a:63:d3:9d:dd:6d:7e:af:09:59:19:50:a9:ba:83:3b:74:4b: c5:2c:7e:1d:57:ba:38:42:39:ca:c5:b0:19:90:3f:87:f2:20: 70:2d:14:7c:38:bf:55:b1:a7:c4:96:05:c9:68:bb:6e:b0:07: 8d:5a:b4:75:b2:37:84:74:40:b9:cd:86:8d:9d:73:1d:8c:36: 35:70:38:fe:6e:28:b4:d0:57:dc:fd:03:c9:1e:df:40:c6:e6: 6b:cd:3f:6b:bd:2d:a5:52:e7:b6:f5:40:1d:9d:a5:3e:bb:d4: 59:98:3b:37:40:5c:5e:4a:15:42:12:39:09:b2:7d:b2:97:e4: e8:d0:2e:87:57:f6:26:ae:b7:58:ed:3a:1a:68:fc:53:c2:93: c1:c8:e9:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCSepIpd0WqUNW7ws/BYNVCc0towDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0 RTk5REM1NzAeFw0yNjA2MTMwODM0MjRaFw0yNjA2MTQxMTUxMjRaMDMxMTAvBgNV BAMTKDU3NzdERUNGMzUxNjg1QzkwQTJGQkFBMzQzODBGOUNEQTFEODgzOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13mgDRddPsFLcVZPmw45/017l C4HBK6F0NeM2TzQZuLUlvF9h1EbY7sq7yjREbAVPaMP+AUXzeVS9tT4Gag+gZ3Fy tGuomgX+x6Mxvtr+ICE+7lM3mrp+TeH+nl7e29Kfj4sMt/RTLpZm6IsKaVwV1mMb z1hXyDtOT5ROS2DDJfsFpBuAJREmReeXVKv0wG37EYMs1Nq11r+1OsN7n/fRkgfM /R8QB/TIlSeDzJM/foqovs5YWQYm+QmTK/8sMx5gNiZRd43xRyJIPMi0YMUwQ9xK ltZzM/UP3SZJOBiZz8vRHPK27lYUCq7z1iLLpK31KmeOxJECCuw5MfRZ9EWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV3fezzUWhckKL7qjQ4D5zaHYg5EwHwYDVR0j BBgwFoAUQSlllkpOEr1ZvfYCoFTzOU6Z3FcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBmN2JlMDYtOTY3Mi00NjQxLTk3YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0 QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0RTk5REM1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTI5NjU5NjRBNEUxMkJENTlCREY2MDJBMDU0RjMzOTRFOTlE QzU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYz Mzk0RTk5REM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVTdVVrN+7BjbDlnx2J+Ypgrt6IDO+4NFJH wM9gB26mqjjBXtOp9ciQ72I1OhSyIhVPWCehVWGeifY59TDGBf+No75zixRgcziB d3QK9Gt7GsovR4KmN0Ad9kCvB0n1kTxelzgt1UAouHcK4Fpj053dbX6vCVkZUKm6 gzt0S8Usfh1XujhCOcrFsBmQP4fyIHAtFHw4v1Wxp8SWBclou26wB41atHWyN4R0 QLnNho2dcx2MNjVwOP5uKLTQV9z9A8ke30DG5mvNP2u9LaVS57b1QB2dpT671FmY OzdAXF5KFUISOQmyfbKX5OjQLodX9iaut1jtOhpo/FPCk8HI6T8= -----END CERTIFICATE-----Generated at Sun Jun 14 05:18:19 2026 by rpki-client